Re: Rust kernel policy
From: Steven Rostedt
Date: Fri Feb 21 2025 - 17:25:31 EST
On Fri, 21 Feb 2025 11:30:41 -0800
Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> wrote:
> And yes, it's wrong in general. The problems with "x < 0" warning for
> an unsigned 'x' are deep and fundamental, and macros that take various
> types is only one (perhaps more obvious) example of how brokent that
> garbage is.
The bug I recently fixed, and I still constantly make, where this does
help, is the difference between size_t vs ssize_t. I keep forgetting that
size_t is unsigned, and I'll check a return of a function that returns
negative on error with it.
If I could just get a warning for this stupid mistake:
size_t ret;
ret = func();
if (ret < 0)
error();
I'd be very happy.
-- Steve